AuthentikLDAPSource
goauthentik.io / v1alpha1
apiVersion: goauthentik.io/v1alpha1
kind: AuthentikLDAPSource
metadata:
name: example
apiVersion
string
APIVersion defines the versioned schema of this representation of an object.
Servers should convert recognized schemas to the latest internal value, and
may reject unrecognized values.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
kind
string
Kind is a string value representing the REST resource this object represents.
Servers may infer this from the endpoint the client submits requests to.
Cannot be updated.
In CamelCase.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
metadata
object
spec object
AuthentikLDAPSourceSpec defines the desired state of an Authentik LDAP Source
additionalGroupDn
string
AdditionalGroupDN is the additional DN for groups
additionalUserDn
string
AdditionalUserDN is the additional DN for users
baseDn
string required
BaseDN is the base DN for the LDAP tree
minLength:
1
bindCn
string
BindCN is the bind DN
bindPassword
string
BindPassword is the password for the bind DN
deleteNotFoundObjects
boolean
DeleteNotFoundObjects deletes objects not found during sync
enabled
boolean
Enabled indicates if the source is enabled
groupMembershipField
string
GroupMembershipField is the field that holds group membership
groupObjectFilter
string
GroupObjectFilter is the LDAP filter for groups
lookupGroupsFromUser
boolean
LookupGroupsFromUser looks up groups from the user attribute
name
string required
Name is the display name of the source
minLength:
1
objectUniquenessField
string
ObjectUniquenessField is the field used to uniquely identify objects
passwordLoginUpdateInternalPassword
boolean
PasswordLoginUpdateInternalPassword updates the internal password on login
propertyMappings
[]string
PropertyMappings is a list of property mapping UUIDs applied to users
propertyMappingsGroup
[]string
PropertyMappingsGroup is a list of property mapping UUIDs applied to groups
serverUri
string required
ServerURI is the LDAP server URI (e.g. ldap://host:389)
minLength:
1
slug
string
Slug is the URL-friendly identifier for the source
Defaults to metadata.name if not specified
pattern:
^[a-z0-9-_]+$
sni
boolean
SNI enables SNI for the LDAP connection
startTls
boolean
StartTLS indicates if StartTLS should be used
syncGroups
boolean
SyncGroups enables group syncing
syncOutgoingTriggerMode
string
SyncOutgoingTriggerMode is the sync outgoing trigger mode
enum:
direct, cached, deferred, deferred_end
syncParentGroup
string
SyncParentGroup is the UUID of the group to sync into
syncUsers
boolean
SyncUsers enables user syncing
syncUsersPassword
boolean
SyncUsersPassword enables syncing user passwords
userMembershipAttribute
string
UserMembershipAttribute is the attribute that holds user group membership
userObjectFilter
string
UserObjectFilter is the LDAP filter for users
userPathTemplate
string
UserPathTemplate is the path template for new users
status object
AuthentikLDAPSourceStatus defines the observed state of AuthentikLDAPSource
conditions []object
Conditions represent the latest available observations of the resource's state
lastTransitionTime
string required
lastTransitionTime is the last time the condition transitioned from one status to another.
This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format:
date-time
message
string required
message is a human readable message indicating details about the transition.
This may be an empty string.
maxLength:
32768
observedGeneration
integer
observedGeneration represents the .metadata.generation that the condition was set based upon.
For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
with respect to the current state of the instance.
format:
int64minimum:
0
reason
string required
reason contains a programmatic identifier indicating the reason for the condition's last transition.
Producers of specific condition types may define expected values and meanings for this field,
and whether the values are considered a guaranteed API.
The value should be a CamelCase string.
This field may not be empty.
pattern:
^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$minLength:
1maxLength:
1024
status
string required
status of the condition, one of True, False, Unknown.
enum:
True, False, Unknown
type
string required
type of condition in CamelCase or in foo.example.com/CamelCase.
pattern:
^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$maxLength:
316
observedGeneration
integer
ObservedGeneration is the last observed generation of the resource
format:
int64
sourceSlug
string
SourceSlug is the Authentik slug (API primary key) for the LDAP source
No matches. Try .spec.additionalGroupDn for an exact path